Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
PlusNet Login Details - Variation Please
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Feedback
- :
- Plusnet Feedback
- :
- Re: PlusNet Login Details - Variation Please
PlusNet Login Details - Variation Please
25-10-2008 8:55 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hi,
to improve the security of both customer network and customer information, I would like to suggest that PlusNet have different username and password combinations for the ADSL router login and, or, account mangement.
At the moment, a router's username and password are too much like the customer's PlusNet account login. Either by design or, by user omission, not all routers are as secure at holding their information as they should be. Which I believe is a potential risk to all customer's data security. Furthermore, as everyone's personal domain names are shared in the public domain, it does not take rocket science to figure out one-half of the login combination!
From what I have seen elsewhere, PlusNet is probably the only ISP that has the same login values for router and customer administration.
Maybe customers could have the option to assign an alias login code for their ADSL router and, account management?
Regards,
Thunderclap
Edit: Thanks for your feedback guys. Indeed, my router of a well respected brand does indeed, store my PN password in clear text in the config.bak file. The issue is that although tech-heads may apply multi-layer asymetric DES encryption to just about everything in Middle Earth, the average family user will not even know what encryption is. Let alone why it is? I believe that by aggregating router login, customer account login and public domain names under the same value is not as secure as it could be for all users.
Thunderclap AKA Hey, you really think I'm going to give out my real PN name?
BTW I'd still recommend PN to a friend.
to improve the security of both customer network and customer information, I would like to suggest that PlusNet have different username and password combinations for the ADSL router login and, or, account mangement.
At the moment, a router's username and password are too much like the customer's PlusNet account login. Either by design or, by user omission, not all routers are as secure at holding their information as they should be. Which I believe is a potential risk to all customer's data security. Furthermore, as everyone's personal domain names are shared in the public domain, it does not take rocket science to figure out one-half of the login combination!
From what I have seen elsewhere, PlusNet is probably the only ISP that has the same login values for router and customer administration.
Maybe customers could have the option to assign an alias login code for their ADSL router and, account management?
Regards,
Thunderclap
Edit: Thanks for your feedback guys. Indeed, my router of a well respected brand does indeed, store my PN password in clear text in the config.bak file. The issue is that although tech-heads may apply multi-layer asymetric DES encryption to just about everything in Middle Earth, the average family user will not even know what encryption is. Let alone why it is? I believe that by aggregating router login, customer account login and public domain names under the same value is not as secure as it could be for all users.
Thunderclap AKA Hey, you really think I'm going to give out my real PN name?
BTW I'd still recommend PN to a friend.
4 REPLIES 4
Re: PlusNet Login Details - Variation Please
25-10-2008 9:48 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
i must admit to being a bit confused.
My router login is totally different and additional to the login for Plusnet ADSL service also the Plusnet login in the router is hidden - I don't know how easy it is to extract that.
My router login is totally different and additional to the login for Plusnet ADSL service also the Plusnet login in the router is hidden - I don't know how easy it is to extract that.
Re: PlusNet Login Details - Variation Please
25-10-2008 10:21 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I can sort of see Thunderclaps point, many routers can backup their settings as a plain text file, this will include your ADSL username and password.
If you have left your router password as default and have remote administration enabled, it is possible to find another users portal login details.
But it does rely on not following basic security precautions, of changing your router password and only enabaling remote administration if it is required (and using as `secure` a password as possible).
If you have left your router password as default and have remote administration enabled, it is possible to find another users portal login details.
But it does rely on not following basic security precautions, of changing your router password and only enabaling remote administration if it is required (and using as `secure` a password as possible).
Re: PlusNet Login Details - Variation Please
25-10-2008 10:27 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Your right - creating a backup with my link:censored has everything in plain text
cp:green In hindsight best not to give out brand names. mod:end
cp:green In hindsight best not to give out brand names. mod:end
Re: PlusNet Login Details - Variation Please
25-10-2008 10:38 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Jim, I have removed the example brand name for our posts, as it isn't a great idea to publish which brands of router have this weakness feature.
I know that the brand we have discussed are aware of this `feature` as their professional versions don't save the passwords in the config file.
I know that the brand we have discussed are aware of this `feature` as their professional versions don't save the passwords in the config file.
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Feedback
- :
- Plusnet Feedback
- :
- Re: PlusNet Login Details - Variation Please